CVE-2004-1448

Impact

Jetbox One 2.0.8 and possibly other versions allow remote attackers with Author privileges in the IMAGES module to upload PHP files and execute arbitrary code.

Affected products

References

• NVD record
• CVE.org record
• http://echo.or.id/adv/adv03-y3dips-2004.txt
• http://secunia.com/advisories/12230/
• http://www.kb.cert.org/vuls/id/417408
• http://www.securityfocus.com/archive/1/370852
• http://www.securityfocus.com/bid/10859
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16900
• http://echo.or.id/adv/adv03-y3dips-2004.txt
• http://secunia.com/advisories/12230/
• http://www.kb.cert.org/vuls/id/417408
• http://www.securityfocus.com/archive/1/370852
• http://www.securityfocus.com/bid/10859
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16900